What are EPP status codes?
EPP (Extensible Provisioning Protocol) status codes are standardized indicators that describe the current state of a domain name. These codes appear in RDAP and WHOIS responses, telling you whether a domain can be transferred, modified, deleted, or is subject to special restrictions.
Categories of status codes
EPP status codes fall into two categories:
Client status (set by registrar)
Prefixed with "client", set by the domain's registrar at the registrant's request:
- clientTransferProhibited
- clientDeleteProhibited
- clientUpdateProhibited
- clientHold
Server status (set by registry)
Prefixed with "server", set by the registry, often for policy enforcement:
- serverTransferProhibited
- serverDeleteProhibited
- serverUpdateProhibited
- serverHold
Common status codes explained
ok
status: okThe standard status for an active domain with no restrictions. Domain can be modified, transferred, or deleted normally.
clientTransferProhibited
status: clientTransferProhibitedRegistrar has locked the domain from transfers. Prevents unauthorized transfers. Must be removed before initiating a transfer.
Common reason: Security lock set by registrantclientDeleteProhibited
status: clientDeleteProhibitedDomain cannot be deleted. Protects against accidental or malicious deletion.
Common reason: Registrant protectionclientUpdateProhibited
status: clientUpdateProhibitedDomain contact/nameserver info cannot be modified. Prevents unauthorized changes.
Common reason: Security lockclientHold
status: clientHoldDomain does not resolve (removed from zone). Set by registrar.
Common reasons: Payment issues, verification required, abuse investigationserverTransferProhibited
status: serverTransferProhibitedRegistry has locked transfers. Often during first 60 days after registration/transfer or during disputes.
Common reason: ICANN 60-day lock, legal disputeserverHold
status: serverHoldDomain does not resolve. Set by registry.
Common reasons: Legal order, registry policy violation, fraud investigationpendingDelete
status: pendingDeleteDomain is scheduled for deletion and will be released for registration.
Implication: Domain will be available soonpendingTransfer
status: pendingTransferTransfer is in progress.
Timeline: Usually 5-7 days to completeredemptionPeriod
status: redemptionPeriodDomain has expired and is in redemption. Can be restored for a fee.
Typical duration: 30 daysStatus codes in RDAP
DomScan returns status codes in API responses:
{
"domain": "example.com",
"available": false,
"registry_status": [
"client transfer prohibited",
"client delete prohibited",
"server transfer prohibited"
]
}
Interpreting multiple status codes
Domains typically have multiple status codes. Example:
clientTransferProhibited
clientUpdateProhibited
clientDeleteProhibited
serverTransferProhibited
This domain is:
- ✓ Fully locked (maximum protection)
- ✗ Cannot transfer (unlock required)
- ✗ Cannot modify (unlock required)
- ✗ Cannot delete (unlock required)
Status codes for domain buyers
When evaluating a domain for purchase:
| Status | Concern Level | Meaning |
|---|---|---|
| ok | Low | Normal, can transfer |
| clientTransferProhibited | Low | Owner must unlock |
| serverTransferProhibited | Medium | May be recent registration/transfer |
| serverHold | High | Possible legal issues |
| pendingDelete | N/A | Will be available publicly soon |
| redemptionPeriod | Medium | Current owner might restore |
Status codes for security
For domain security, ensure these are set:
Minimum recommended:clientTransferProhibitedclientTransferProhibited
clientUpdateProhibited
clientDeleteProhibited
serverTransferProhibited
serverUpdateProhibited
serverDeleteProhibited
Registry lock requires manual verification for any changes and is used for high-value domains.
Checking domain status
# Using DomScan
curl "https://domscan.net/v1/status?name=example&tlds=com"
# Using RDAP directly
curl "https://rdap.verisign.com/com/v1/domain/example.com" | jq '.status'
Status codes are essential for understanding what actions are possible with a domain and identifying potential issues before purchase or transfer.